$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer File: 9FEECC44761A13EA26CA368508BB6A48C00FC6F5.cer (raw, json) Hash identifier: N01NQC9qhs7sZ+ndwgZ+Gcs1wxxyhB5O5F/jHwoMngI= Subject key identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1F8A7951C00D2DEEFD59966B718E4BCD31244899 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft caRepository: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 29 May 2025 12:43:35 +0000 Certificate not after: Thu 28 May 2026 12:48:35 +0000 Subordinate resources: IP: 160.22.192.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8a:79:51:c0:0d:2d:ee:fd:59:96:6b:71:8e:4b:cd:31:24:48:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: May 29 12:43:35 2025 GMT Not After : May 28 12:48:35 2026 GMT Subject: CN=9FEECC44761A13EA26CA368508BB6A48C00FC6F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:80:d8:1f:f5:b7:b5:31:67:70:c3:f0:46:7d: 11:a7:75:15:08:51:db:ee:3e:f0:9c:e2:cf:df:c1: 5a:fd:e9:20:51:be:0a:a8:c3:00:17:e4:9d:1f:d8: f1:9d:26:e3:e4:84:15:a2:30:b1:c6:5d:74:63:8b: 00:8a:42:b6:0c:d9:eb:ed:a1:03:b5:7b:15:5f:ea: 5a:f8:12:e4:b4:0b:cb:cf:1d:49:1d:32:e2:04:3b: 57:23:56:e1:61:94:6c:99:29:1b:7a:70:61:31:af: 95:6f:9f:22:94:b7:47:a6:80:c5:9c:0c:09:70:13: 56:57:8c:6e:2e:c6:47:ca:4f:cd:4c:e0:e7:41:d2: 64:93:9d:58:a9:96:6a:fb:f7:57:e7:dc:e4:2b:53: d2:99:a2:22:41:46:4d:d5:92:18:a2:31:77:dc:3a: 58:1a:02:29:2c:96:88:68:f2:e0:ae:b9:a1:22:2a: 29:cb:77:1c:46:cf:b0:53:25:c2:cc:e9:dc:bb:10: 37:e9:66:05:1a:57:20:dd:18:29:07:75:83:ca:48: 2b:b2:cd:21:42:d3:f1:bb:84:a5:39:39:75:a0:a1: 46:48:e3:37:a9:8f:dd:13:6d:61:18:d6:2d:10:fa: f1:18:1c:55:34:6a:8b:02:38:94:1b:2f:55:78:04: e9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:EE:CC:44:76:1A:13:EA:26:CA:36:85:08:BB:6A:48:C0:0F:C6:F5 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/0/9FEECC44761A13EA26CA368508BB6A48C00FC6F5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.192.0/23 Signature Algorithm: sha256WithRSAEncryption 79:88:19:bc:70:4d:66:5d:85:1d:cc:68:18:f7:31:c0:6c:12: 08:44:65:f3:44:d4:39:da:7d:b7:02:8a:6d:bc:34:16:ba:03: 74:34:9d:bb:33:00:1b:59:f7:7b:09:d7:83:2a:a0:02:4a:9f: 5f:e2:a4:41:1b:a0:81:2b:0b:b8:b1:2b:39:69:25:58:10:24: ab:19:46:60:30:93:3d:c6:2d:6e:25:13:d8:e9:d5:9f:47:c9: 4f:ca:11:1c:a7:40:e6:db:fb:ae:08:4c:96:12:79:a1:17:a1: 6a:77:fb:9b:e9:70:17:5c:e0:c4:b8:f4:f4:25:be:15:4e:35: 52:12:d1:84:9b:92:57:2f:1d:63:f4:3b:26:41:b7:e8:16:c4: af:c6:f6:b5:e4:6b:78:3a:8c:2d:99:63:b6:2d:26:f2:86:a3: 84:5b:4c:b2:00:d0:8e:83:91:57:7b:6a:55:72:92:f5:f7:49: aa:bc:03:cf:d9:cb:27:a3:e5:71:78:f0:54:c2:a9:92:9a:82: c9:a1:c0:1d:09:88:04:76:23:5d:96:4a:00:8b:8a:77:05:0e: b8:6c:35:09:5d:ac:b4:6c:50:3d:12:97:af:e1:a7:f5:13:cb: ec:5c:d1:7a:2b:cc:8b:14:1a:13:00:76:17:ae:50:ba:40:ed: 14:0a:7c:a5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUH4p5UcANLe79WZZrcY5LzTEkSJkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDUyOTEyNDMzNVoX DTI2MDUyODEyNDgzNVowMzExMC8GA1UEAxMoOUZFRUNDNDQ3NjFBMTNFQTI2Q0Ez Njg1MDhCQjZBNDhDMDBGQzZGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSA2B/1t7UxZ3DD8EZ9Ead1FQhR2+4+8Jziz9/BWv3pIFG+CqjDABfknR/Y 8Z0m4+SEFaIwscZddGOLAIpCtgzZ6+2hA7V7FV/qWvgS5LQLy88dSR0y4gQ7VyNW 4WGUbJkpG3pwYTGvlW+fIpS3R6aAxZwMCXATVleMbi7GR8pPzUzg50HSZJOdWKmW avv3V+fc5CtT0pmiIkFGTdWSGKIxd9w6WBoCKSyWiGjy4K65oSIqKct3HEbPsFMl wszp3LsQN+lmBRpXIN0YKQd1g8pIK7LNIULT8buEpTk5daChRkjjN6mP3RNtYRjW LRD68RgcVTRqiwI4lBsvVXgE6WsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ/uzER2GhPqJso2hQi7akjAD8b1MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhMDIxMGIz LWNjYTItNDNjNS04OWY5LTVhOTA4NmE2MDcwMy8wLzlGRUVDQzQ0NzYxQTEzRUEy NkNBMzY4NTA4QkI2QTQ4QzAwRkM2RjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgFsAwDQYJKoZIhvcNAQELBQADggEBAHmIGbxwTWZdhR3MaBj3McBsEghEZfNE 1DnafbcCim28NBa6A3Q0nbszABtZ93sJ14MqoAJKn1/ipEEboIErC7ixKzlpJVgQ JKsZRmAwkz3GLW4lE9jp1Z9HyU/KERynQObb+64ITJYSeaEXoWp3+5vpcBdc4MS4 9PQlvhVONVIS0YSbklcvHWP0OyZBt+gWxK/G9rXka3g6jC2ZY7YtJvKGo4RbTLIA 0I6DkVd7alVykvX3Saq8A8/Zyyej5XF48FTCqZKagsmhwB0JiAR2I12WSgCLincF DrhsNQldrLRsUD0Sl6/hp/UTy+xc0XorzIsUGhMAdheuULpA7RQKfKU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:29:55 2025 by rpki-client